Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          w3rmFF4TN44p+rvML5pylGI2fYuitq0TQ3EEeyZ/1Iw=
Subject key identifier:   56:63:9F:F4:CE:DD:95:28:FF:94:6B:31:12:78:D6:65:21:C6:49:32
Certificate issuer:       /CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Certificate serial:       53A3E8CBDBE8AC67937DB3B4BB4663A42A2DD88A
Authority key identifier: A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
Signing time:             Tue 04 Mar 2025 06:48:05 +0000
ROA not before:           Tue 04 Mar 2025 06:43:05 +0000
ROA not after:            Tue 03 Mar 2026 06:48:05 +0000
asID:                     265393
IP address blocks:        168.194.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 02:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a3:e8:cb:db:e8:ac:67:93:7d:b3:b4:bb:46:63:a4:2a:2d:d8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
        Validity
            Not Before: Mar  4 06:43:05 2025 GMT
            Not After : Mar  3 06:48:05 2026 GMT
        Subject: CN=56639FF4CEDD9528FF946B311278D66521C64932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a7:f9:25:3a:05:a9:f3:6d:28:05:ef:f9:f5:
                    f1:ce:4b:23:8f:ba:de:26:7b:e0:27:f9:fb:87:19:
                    5c:1e:6a:19:91:c9:2c:7a:80:c8:0d:0d:49:32:d3:
                    d8:c0:f8:7a:73:1b:4d:42:e8:7f:e4:f5:02:35:1e:
                    c9:54:8d:db:64:13:86:d4:b1:d7:7d:63:d2:4e:c2:
                    d6:79:73:1a:b8:97:78:74:d8:d3:a3:b0:7e:5c:ac:
                    21:56:c8:07:1c:ad:34:d1:32:5f:86:8d:07:58:63:
                    7b:a6:89:a5:5a:30:69:37:0e:2b:31:e6:cf:60:cf:
                    68:e0:84:a5:1e:4f:6f:e7:48:5a:97:80:cd:d0:c9:
                    96:da:67:55:ab:f6:ca:22:2f:17:0e:25:b5:14:86:
                    fa:59:96:8c:36:5f:e7:6b:84:bd:b1:a3:7a:e3:f8:
                    ea:21:3b:30:9f:ba:b0:9a:25:1f:4d:f0:87:48:78:
                    2f:03:ee:de:c3:90:2d:ba:7e:c6:f8:23:36:69:f4:
                    51:a7:dd:09:1c:a4:16:aa:9a:55:7e:6c:1a:32:d5:
                    6e:07:44:22:4f:e8:36:fd:02:50:75:34:df:9a:20:
                    58:ae:8f:89:1a:a2:f6:10:a9:ea:5b:bf:9b:74:15:
                    6e:5e:07:5a:88:b6:f3:4c:b9:92:e7:29:9e:7d:a7:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:63:9F:F4:CE:DD:95:28:FF:94:6B:31:12:78:D6:65:21:C6:49:32
            X509v3 Authority Key Identifier:
                keyid:A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:22:11:16:16:b0:3f:26:36:5c:c7:8a:48:3a:0b:9f:03:ce:
         08:92:3c:b2:ff:68:13:51:5d:3d:89:5d:31:c2:fc:e4:db:e2:
         ea:a9:14:a1:74:03:fc:56:51:4e:c9:7c:64:a5:ad:44:0d:a8:
         ef:84:17:96:e1:7a:92:2a:c2:ea:ae:f2:84:40:2f:c1:64:41:
         fb:1b:e4:1c:26:14:fe:9a:eb:37:61:3e:48:e4:bb:c6:f8:37:
         81:46:5f:28:cd:15:6a:0d:89:31:26:07:ff:6d:9d:53:c1:99:
         fc:10:f7:71:7d:59:4c:0f:5e:3f:cc:fa:76:69:4a:28:76:c8:
         58:91:65:33:36:10:22:86:57:3d:8e:78:14:59:27:4c:c1:13:
         33:69:f4:10:7f:42:30:46:9b:44:90:5e:92:b1:fd:9b:91:b3:
         a4:33:5c:12:79:4f:f9:bf:85:9a:de:5b:da:77:1e:9a:ab:ea:
         1b:66:e1:de:3a:87:b0:a2:48:75:2e:40:9d:d9:69:77:2a:1f:
         08:4b:d8:10:75:dd:b1:6c:af:ac:db:ec:bd:9e:eb:56:21:86:
         1b:5d:08:0a:21:d0:f5:28:84:94:77:98:e3:09:c9:cd:82:8f:
         ee:66:5d:bd:a0:12:db:69:10:44:f8:a1:c8:63:34:ec:a4:31:
         86:b7:76:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:24:38 2025 by rpki-client